Static task
static1
Behavioral task
behavioral1
Sample
2658573b2e9185a77dd1f5ecec0b7b12.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2658573b2e9185a77dd1f5ecec0b7b12.exe
Resource
win10v2004-20231215-en
General
-
Target
2658573b2e9185a77dd1f5ecec0b7b12
-
Size
2.1MB
-
MD5
2658573b2e9185a77dd1f5ecec0b7b12
-
SHA1
db5ef8f911cad83c53f8f2d94dc966038d938cae
-
SHA256
5a52c9d4679b462b226289ea3d3d186023e13b761e7ef16a5cbd3ba73abfbaac
-
SHA512
161bc284a8ad7c973e6883038884ea59ec0f8183cb2434e0150f04062a5ca2ef489792acff76a413f1952a59b921d6fba328a9447aff5ce132287ab9b347bef3
-
SSDEEP
49152:f7v9MKFJCIabjKoh9W87v9MKFJCIabjKoh9WCi:79YIabjKoh9Wu9YIabjKoh9WCi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2658573b2e9185a77dd1f5ecec0b7b12
Files
-
2658573b2e9185a77dd1f5ecec0b7b12.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
petite Size: 325B - Virtual size: 325B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ